4 Commits

Author	SHA1	Message	Date
Martin Pitt	7987eddb9f	apparmor: Allow slave bind mounts ... Without this, if the system uses shared subtrees by default (like systemd), you get a large stream of lxc-start: Permission denied - Failed to make /<mountpoint> rslave lxc-start: Continuing... with apparmor="DENIED" operation="mount" info="failed flags match" error=-13 profile="/usr/bin/lxc-start" name="/" pid=17284 comm="lxc-start" flags="rw, slave" and eventual failure plus a lot of leftover mounts in the host. https://launchpad.net/bugs/1325468	2014-07-30 16:43:10 +02:00
Stéphane Graber	524505b971	apparmor: Use more generic allow rule for pivot ... Recent fixes in the apparmor kernel code is now making at least the CI environment and quite possibly some others fail due to an invalid path in the pivot_root stanza. So update both lines to allow a more generic pivot_root call for anything in LXC's work directory. Signed-off-by: Stéphane Graber <stgraber@ubuntu.com> Acked-by: Serge E. Hallyn <serge.hallyn@ubuntu.com>	2014-04-08 14:45:00 -04:00
Stéphane Graber	2a31251cc5	apparmor: Update profiles for current upstream parser ... Signed-off-by: Stéphane Graber <stgraber@ubuntu.com> Acked-by: Serge E. Hallyn <serge.hallyn@ubuntu.com>	2014-04-04 17:45:35 -04:00
Stéphane Graber	8da250dad4	apparmor: Add profiles ... Signed-off-by: Stéphane Graber <stgraber@ubuntu.com> Acked-by: Serge E. Hallyn <serge.hallyn@ubuntu.com>	2014-01-16 17:49:23 -05:00